Expr (Expr-lang) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 104 known versions, newest CVE from 2025-12-16. Vendor: Expr-lang.

CVEs of Expr

• CVE-2025-68156 - CVSS 7.5 (high), 2025-12-16: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`,…
• CVE-2025-29786 - CVSS 7.5 (high), 2025-03-17: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser is given an unbounded input string, it…